Vendor
The YaySMTP WordPress plugin (<= 2.7.7) is vulnerable to arbitrary file upload due to insufficient validation in the putFile function, allowing authenticated users to achieve remote code execution.